This Privacy Notice is provided in accordance with Article 10 of Türkiye's Personal Data Protection Law No. 6698 ("KVKK") and explains how personal data is collected, processed, and transferred through Slidyo.
Data Controller
Your personal data is processed by:
- Company: Vefactor Yazılım Sanayi ve Ticaret Limited Şirketi
- Product: Slidyo
- Registered Address: Sırakapılar Mah. Saltak Cad. No: 59 İç Kapı No: 9, 20010 Merkezefendi/Denizli, Türkiye
- Website: https://slidyo.com
- Email: support@slidyo.com
Slidyo acts as a data controller for personal data processed for its own business and service operations. When processing organizational content on behalf of a customer, Slidyo may act as a data processor, depending on the relevant activity.
Personal Data We Process
Depending on how you use Slidyo, we may process the following categories of personal data:
- Identity and Contact Information: Name, email address, profile information, and account details.
- Account and Security Information: IP addresses, device information, login sessions, authentication records, and security logs.
- User Content: Presentations, CVs, portfolios, uploaded documents, prompts, and AI-generated content.
- Team Workspace Information: Organization details, team membership, invitations, permissions, shared content, and workspace activity.
- Link Engagement Information: Document views, viewing duration, interactions, approximate location, device information, and voluntarily provided viewer details.
- Payment and Subscription Information: Subscription plans, billing contact details, transaction references, payment status, and renewal or cancellation records received from Paddle when payment services are enabled.
- Communication Information: Messages submitted through contact forms, support requests, and related correspondence.
Uploaded documents may contain personal data belonging to other individuals. Users and organizations are responsible for ensuring that they have the necessary authority and lawful grounds to provide such information.
Purposes and Legal Grounds for Processing
We process personal data for the following purposes and under the relevant conditions of KVKK Article 5:
| Purpose | Legal Ground |
|---|---|
| Creating accounts and providing requested services | Article 5(2)(c): performance of a contract |
| Processing documents and delivering requested AI features | Article 5(2)(c), where necessary for a contract |
| Managing Team Workspaces and member access | Article 5(2)(c) or 5(2)(f), as applicable |
| Managing subscriptions and providing billing support | Article 5(2)(c) |
| Maintaining legally required financial and business records | Article 5(2)(ç): legal obligation |
| Protecting accounts and preventing abuse | Article 5(2)(f): legitimate interests, subject to individual rights |
| Providing Link engagement analytics | Article 5(2)(f), where its conditions are satisfied, or Article 5(1): explicit consent, where required |
| Responding to support requests | Article 5(2)(c) or 5(2)(f), as applicable |
| Optional AI model training using customer content | Article 5(1): explicit consent, where applicable |
Where Slidyo uses customer content for optional AI model training, it will do so only with the necessary voluntary authorization and lawful processing conditions. Declining optional training consent will not prevent access to core services.
Where special categories of personal data are involved, processing must satisfy the additional conditions of KVKK Article 6.
How Personal Data Is Collected
Personal data may be collected through automated electronic methods, including:
- Account registration and Google authentication.
- Document uploads and AI feature interactions.
- Team Workspace invitations and collaboration activities.
- Shared Links and viewer interactions.
- Website and platform usage.
- Contact forms and customer support communications.
- Billing and subscription information received from Paddle, where applicable.
Information is collected directly from users, through their interaction with Slidyo, from authorized organizations, or through relevant service providers.
Sharing and Transfer of Personal Data
Where necessary for the purposes described above, personal data may be shared with:
- Hosting and storage providers: To operate and maintain the platform.
- AI service providers: To deliver requested document processing, content generation, and presentation features.
- Authentication and communication providers: To support login, account security, notifications, and customer support.
- Paddle: To facilitate subscription transactions, billing, refunds, and related payment operations when enabled.
- Authorized Team Workspace members: To provide organizational collaboration according to applicable permissions.
- Document recipients: When content is shared through Links.
- Public authorities and professional advisers: Where required or permitted by law.
Paddle acts as the authorized reseller and Merchant of Record for transactions processed through its services and independently handles relevant payment-related personal data according to its own privacy policies and legal obligations.
Slidyo does not require complete payment card numbers or card security codes to administer subscriptions.
International Data Transfers
Some service providers used by Slidyo may operate outside Türkiye.
Where personal data is transferred internationally, such transfers must comply with Article 9 of KVKK and applicable data protection requirements.
Depending on the circumstances, lawful transfer arrangements may include an applicable adequacy decision, appropriate safeguards such as approved standard contracts, or another legally permitted transfer mechanism.
International transfers are limited to purposes necessary for operating Slidyo and providing the relevant services, subject to applicable legal requirements.
Data Retention and Security
Personal data is retained only for as long as necessary for the relevant processing purpose and applicable legal obligations.
- Account and uploaded content are generally retained while the associated account or workspace is active, subject to applicable deletion procedures.
- Detailed mouse and click interaction information is retained for 90 days.
- Engagement summaries are retained while the associated shared content or account remains available.
- Notification email records are retained for 90 days.
- Billing and subscription records are retained for applicable contractual and statutory purposes.
- Security records are retained where necessary to investigate incidents and protect the Services.
Slidyo applies technical and organizational security measures appropriate to the relevant processing activities.
Further information is provided in our Privacy Policy.
Your Rights Under KVKK
Under Article 11 of KVKK, you have the right to:
- Learn whether your personal data is processed.
- Request information about the processing of your personal data.
- Learn the purposes of processing and whether your data is used accordingly.
- Know the third parties to whom your personal data is transferred, within Türkiye or abroad.
- Request correction of incomplete or inaccurate personal data.
- Request deletion or destruction of personal data under applicable legal conditions.
- Request notification of relevant corrections or deletions to third parties to whom your data was transferred.
- Object to results arising against you from analysis conducted exclusively through automated systems.
- Request compensation for damages caused by unlawful processing of your personal data.
How to Exercise Your Rights
You may submit a request concerning your personal data by contacting:
- Email: support@slidyo.com
- Postal Address: Vefactor Yazılım Sanayi ve Ticaret Limited Şirketi, Sırakapılar Mah. Saltak Cad. No: 59 İç Kapı No: 9, 20010 Merkezefendi/Denizli, Türkiye
Requests must be submitted using an application method permitted under KVKK and its applicable regulations.
Where permitted, requests may be submitted using an email address previously registered in our systems. Other accepted methods may include written applications, registered electronic mail (KEP), or secure electronic signatures.
We may request appropriate identity verification before processing your request.
We will respond as soon as reasonably possible and within the statutory period of 30 days, subject to applicable requirements.
Changes to This Notice
We may update this KVKK Privacy Notice to reflect changes to our data processing activities, services, or legal obligations.
The updated version will be published on this page with a revised date.
Where legally required, additional notice will be provided before materially different processing begins.
Related Policies
For more information, please review:
Contact: support@slidyo.com